Skip to content
Agentsmedium signalverified

Copilot's app and CLI now obey content exclusions, and an admin can set the default model

GitHub shipped two Copilot changes on September 2, 2026. The Copilot app and Copilot CLI now respect the content exclusion rules that enterprise, organization and repository administrators configure, on Copilot Business and Copilot Enterprise. Enterprise-managed settings now accept the name of a specific model as the default for new conversations. The documentation also spells out the limits: an excluded file can still reach the model through type information the editor supplies, and the rule covers neither symbolic links nor repositories on remote filesystems.

By Redakcija WebAiRadarPublished 2 min readwritten by a model
Image: GitHub

If your employer keeps certain files away from Copilot, that rule now follows you into the Copilot app and the Copilot CLI. GitHub made content exclusions generally available in both clients on September 2, 2026, for Copilot Business and Copilot Enterprise. The same day brought a second change: an administrator can name the model that new conversations start with.

What an exclusion actually stops

An exclusion is a list of paths written in fnmatch pattern notation, set by a repository administrator, an organization owner or an enterprise owner. GitHub's documentation lists four consequences for a file that matches a pattern.

A new rule does not apply the moment it is saved. The documentation says it can take up to 30 minutes for changes to take effect in environments where the settings are already loaded, so a rule written at the start of a meeting may not be in force by the end of it.

  • Inline suggestions are not available in the affected files.
  • The content of those files does not inform inline suggestions in other files.
  • The content does not inform Copilot's responses in chat.
  • The files are not reviewed in a Copilot code review.

Where the rule does not reach

An exclusion does not mean the model learns nothing about the file. The documentation says Copilot may use semantic information from an excluded file when the editor passes it along indirectly, and it names type information, hover-over definitions for symbols and general project properties as examples.

The second limit is easier to miss. Content exclusions do not apply to symbolic links or to repositories on remote filesystems. Anyone treating the feature as a guard on credentials or customer data should check how those files are reachable on the machine before relying on it.

The default model becomes an administrator's decision

The second change concerns model choice. In enterprise-managed settings the model key now takes the name of a specific model and version, and the documentation uses kimi-k-3 as its example. The change is generally available on Copilot Business and Copilot Enterprise, in the Copilot app, in Copilot CLI and in Visual Studio Code.

The setting governs only where a conversation starts. A user can still pick a different model inside a single conversation. An administrator who wants separate defaults per team marks the key overridable and maps teams through team-mappings.json, and a team that wants no imposed choice writes unmanaged in its own settings file.

Support is not uniform across clients. The documentation lists the model key as supported in Copilot CLI, Visual Studio Code and the GitHub Copilot app, and as unsupported in JetBrains IDEs and in the Copilot cloud agent.

„Copilot may use semantic information from an excluded file“
GitHub documentation

Sources

BrandsCopilot

Related

OPENCLAW 2026.10.232,768characters, and past that a key could slip thr
Agentsmedium signal

OpenClaw 2026.10.2 stops long tool output from slipping credentials past redaction

A bug in OpenClaw's secret masking let a credential through whenever it straddled the boundary between two slices of a long text. The fix ships in 2026.10.2 along with repaired updates from 2026.10.1 and a new compaction default for OpenAI and Anthropic API keys.

OpenClawverified

The OpenClaw web interface with a conversation on the left and the Bits & Bolts reference MCP app open beside it, showing a 3D keycap model and an Attach view + note button.
Agentsmedium signal

OpenClaw 2026.10.1 lets agents search installed skills and changes how sessions message each other

OpenClaw released version 2026.10.1 on October 10, 2026, its first stable release since 2026.9.7. Agents can now search the skills installed on a machine and read only the one a task needs, instead of carrying the whole library in the prompt. Opt-in MCP Apps run beside chat, and full backups can go to an external drive or Cloudflare R2. Three changes can break existing setups: session-to-session messaging, the old required argument, and Workboard data stored before July 2026.

OpenClawverified

CLAUDE CODE2.1.294hooks written as instructions now block what t
Agentsmedium signal

Claude Code 2.1.294 fixes prompt hooks that let through the actions they were written to block

Anthropic released Claude Code 2.1.294 on October 8, 2026. It fixes prompt and agent hooks phrased as instructions, which could allow exactly the actions they were meant to stop. Version 2.1.295 followed the same day with an onFailure setting that makes a crashed or timed-out command or HTTP hook block the action. Releases 2.1.292 and 2.1.293 from earlier in the week closed several permission and sandbox gaps.

Claude Code Releases (GitHub)verified